We help IT Professionals succeed at work.

Can we or good to install Ap Struts patches even if we don't run Ap Struts

287 Views
Last Modified: 2018-02-06
Q1:
Will the patches install even if we don't use Apache Struts?

Q2:
Is it good practice to install Apache Struts patches even if we don't use
Ap Str?  Perhaps in future someone may install Ap Struts & the IT
Security team doesn't realize it

Q3:
What are the common products that use Ap Str?  IBM Websphere,
Ap webserver?
Comment
Watch Question

Exec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
Top Expert 2015
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
Top Expert 2015
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
btanExec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
If I'm not mistaken, from the link of the vulnerability, we're asked to install a newer
release (sort of sub-version) & it's not a patch : if that's the case, then if we have no
Struts running/installed currently, the more we should not install it as we'll end up
having Struts installed (which we don't have in the first place) & this will open us
up to future Struts vulnerabilities.  

From past Apache Struts V2 vulnerabilities, is it usually patches or newer releases
that are provided to address the vulnerabilities?
btanExec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions